made lbaas vpnaas optional